Would anyone have any idea on how to script a logout hook to remove the entire login keychain of the user logged in?

I am trying to deploy CrashPlan PROe using the JSS, following the procedure in the "Administering CrashPlan PROe with the Casper Suite" document. I have run into an issue and need guidance. After I build and deploy the CrashPlanCustomInstallation.dmg, the device pops up in the CrashPlan Dashboard, owned by me, not the logged in user of the device that has been enrolled in CrashPlan. I believe I am missing something in these steps in the white paper (written by JAMF, 8/12): Mount the CrashPlanPROe_Mac.dmg file in the CrashPlanPROe_Custom directory by double-clicking it.Copy the hidden .Custom directory to /Library/Application Support/CrashPlan/ by executing the following command: sudo cp -r /Volumes/CrashPlanPROe/.Custom /Library/Application Support/CrashPlanOpen Composer and authenticate locally.Locate the CrashPlan directory in /Library/Application Support/ and drag it to the sidebar in Composer. The directory will appear under the Sources heading. Rename the “CrashPlan”

I've had some odd issues that happened with some of our Macs in my company. We have over 100 Macs that are being managed with about 80 of those being used by employees. Other Macs are either shared or test machines. Last Friday, we received a couple calls about someone's Mac freezing or locking up. The issue is that you can't type or access any menu bar items. You can open and close apps, but that's the extent. Throughout this week, we had a few more Macs with the same issue and have a total around 8 Macs with the issue. I opened Activity Monitor, but don't see anything that isn't responding or using up resources. I was able to use Casper Remote and remote in as myself rather than prompting to remote into their side. When I remoted in, I wasn't seeing the issue that the user was currently having. I was able to type and open and close anything without trouble. Digging through the console and logs didn't show any issues. I tried removing the comp

Hello all, I feel like I am just missing something here, but I am testing out the option to deploy filevault to our employees at my University. I want to make sure we have a clear method for data recovery should the user forget their password and/or our management account is not filevault-enabled. I set up a policy to enable Filevault, made an institutional key and uploaded it to Casper. Everything seems to work fine with that and I can see that Filevault is enabled on my test machine and Casper sees it as well. However, I cannot for the life of me get the recovery key to actually work. I have tried typing in the key exactly into the password field and into the "unlock" option in disk utility (on recovery partition) to no avail. I have also tried all variants of this I can think of (although all documentation says it needs to match exactly). Any ideas why this recovery key appears to do nothing as far as recovery is concerned? Thanks!

Somehow I got locked out of my NetSUS server admin console (I can ssh in though) and I'm unable to log in. I tried following the recommendation at the article here, but I still can sign in.Whats odd too is that the file mentioned, appliance.conf.xml, does not contain anything in it. Its an empty file. When I try to populate it with some XML elements and restart the web service, it clears out the file again (edited with sudo privileges). Any ideas on how I can get back into my NetSUS server?

Is there a way to push a lock screen message through Casper? (System Preferences - General - Show a message when screen is locked). As per support there is no configuration profile payload that can be used. Also found this command doing a google search: sudo write /Library/Preferences/com.apple.loginwindow LoginwindowText "Your Message Here", but that does not seem to do the trick either. Machines are running a mix of 10.11 and 10.12 Thanks!

Greetings, all! I am fairly new to iOS MDM with Jamf Now so apologies in advance. I am testing iOS deployment using Apple Configurator 2 for all non-DEP enrolled iOS devices for a future MDM rollout. I have created a blueprint for this iPad and have enabled the Apple Configurator 2 setting in my JSS (running v9.92) as well. The details of the blueprint being used are fairly simple. I have it installing a profile with the wireless network settings and being enrolled to the specified JSS as a supervised device with some modified Setup Assistant settings. Please find these details below, for reference. The iOS device is quickly provisioned and enrolled into my JSS as expected. Where I am having an issue is with app deployment. I have tried to deploy Self Service as an application directly from the blueprint and also tried doing this from the JSS as an automatic installation. These applications have been properly purchased (though they are both free) with our VPP account and have been

Hi All! In my quest to automate everything I decided to roll out a script that checks if the user is enrolled with out MDM and if they are not, go to our backup profile that is saved in the library and install it. I was testing it by running it, and it seems that it doesn't see our MDM Profile and still wants to install the new one. I think it has something to do with how I have it exit, but I cannot figure it out. #!/bin/bash if sudo profiles -P | egrep -q ': com.YOUR IDENTIFIER$'; then exit 0 else profiles -I -F /Library/Sandbox/MDM Profile.mobileconfig fi Thanks for any help,Jared

Hello,I'm trying to collect inventory data from the JSS via API calls using Python. When I make a request import requests jss_application_usage = requests.get('https://domain.jamfcloud.com/JSSResource/computerapplicationusage/id/%s/%s_%s' % (computer_id, yesterday, today), auth=HTTPBasicAuth(api_user, api_password)) and try to see what type of content gets sent to me, print jss_application_usage.headers['content-type'] I only get text/xml;charset=UTF-8 as my response. So my question is, is there a way to get back json data instead of XML? Is this something that needs to be configured on the JSS? Thanks!

Specifically, I would like a machine to restart (regardless of who is connected) every Friday at 6:00 PM. Can anyone help me with this?

Hi all I'd like to find a way to unbind a machine from Active Directory and have the computer object removed, i know that i can use dsconfigad -force -remove -u username -p password but i don't want to store the password in the script or a policy's parameter. Is there any way to use the JSS Directory Bindings that we use to bind a machine to also unbind the machine and remove the computer object ? or is anyone using a different approach to automatically remove machines from AD ?

In the process of moving computers from current Production JSS to new JSS. We're not migrating, we're re-enrolling to start clean. The move is easy, but I'm trying to clean up my old JSS as they migrate. I figured an easy way to do this would be through the API, but I've not used API for anything yet, and am scratching my head as to what is failing. My script is below. #!/bin/bash name=`scutil --get HostName` curl -X DELETE -u jamfadmin:password https://jsstest.org.com:8443/JSSResource/computers/id/$name exit 0 My output seams to show that it's not grabbing the host name as expected but I'm not sure why. I'm sure it's blatantly obvious, but for the life of me, I'm not seeing it. sh --verbose API Delete.sh #!/bin/bash name=`scutil --get HostName` scutil --get HostName curl -X DELETE -u jamfadmin:password https://jsstest.org.com:8443/JSSResource/computers/id/$name <html> <head> <title>Status page</title> </head> <body style="font-family

Is there any way to put and use Self-Service on a Windows machine?

Hi all, I'm trying to script this but can't get it to work for all users. What I'm trying is: rm -rf /Users/*/Library/Application Support/Google/Chrome But this isn't working even when run as root. If I run it as any logged in user it'll delete it from their own home directory, but I can't get it to run globally. I'm working with AD users if that makes a difference at all. Am I missing something?

Hello, I find myself ahead of the curve-a rarity! My existing AD Bindings in JSS that work on El Cap and older configs do not seem to function on Sierra. I am using the macOS Sierra GM seed. Anyone else try this or have issues? Oh, and running JSS 9.96 TIA, /randy

Apple Remote Desktop is able to authenticate with a client computer, but it is unable to connect to it for some reason. I have tried completely uninstalling as per the following article: https://support.apple.com/en-us/HT201766 No good. I am able to connect to the client from a different computer running the same OS (Mac OS X 10.11.1) It just hangs on "Connecting…"

I'm trying to run a script to check first if a file is already on the mac I want it to quit, and if the file is not on the mac to go ahead and install it. At the moment I have a policy that copy the file to /tmp/CB/file.pkg than it gets installed.( file.pkg gets installed into "/Applications/file.pkg")But I want it to skip install if the file.pkg is already installed on the "/Applications/file.pkg" I told you it was basic =) this is what I have so far: #!/bin/sh installer -pkg /tmp/CB/file.pkg -target /

I uploaded the S4b installer to the JSS, created a self service policy. Self Service says it installed correctly, but the logs show: Installation failed. The installer reported: installer: Error - I tried then pushing via C. Remote and it failed with the same error. I tried on one of my freshly imaged machines through self service and it did complete. So I went back through the logs and apparently it's failing consistently through SS. Is it one of those apps I need to re-bundle with postimage script?

I'm writing an EA that has the following line... migrationStatus=`defaults read /Library/path/to/com.****.****.plist "Migration"` If the plist or key isn't there, I get the following error message and $migrationStatus is set to nothing. The domain/default pair of (/Library/path/to/com.****.****.plist, Migration) does not exist I'm not a super scripter by any means. How can I handle this so that I can check against the file not existing or if the key is missing from the plist file?

Hello everyone, Yesterday I tested a push of the 9.2.1 update to 40 iPads with 9.1 installed to see if it would work overnight. It succeeded, but only for half of the devices (I made a smart group with 9.1 devices across 2 of our carts). The real issue now is that the iPads that updated to 9.2.1 all had their mobile device names revert to "iPad". I cannot change them back. Device history shows every attempt to change device name as successful. I have tried removing the "enforce device name" checkbox and reapplying it. I can also confirm any iPads updated from 9.2 have not had this happen. Has anyone else seen this?

I keep getting Mac users that are getting the Start up disk is almost full message. When I look at the Storage tab in About this mac I am seeing around 50 to 80 gb if space being used by "Other". I tried using a program called daisy disc to help find what the "other" is. So far I have not been able to find what is taking up so much space. Has anyone else had this issue or have recommendations on places to look? Thanks

Hi everyone, I'm being forced to deploy SilverFast scanning software in our Graphics and Photography labs. Due to Epson not providing 64bit drivers for most of their scanner models, Silverfast needs to be opened in 32-bit mode when connected to the Epson scanners we have. Is there a way I can script this or configure this system-wide using Casper. The right-click, get-info, checkbox "Open in 32-bit mode" method is not going to cut it in our academic labs. Thanks! ~Ted

Hi All, We are having problems with reconning systems with casper at the moment. When we attempt to recon from a system using the "sudo jamf recon" command in terminal we get a result saying "There was an error. Message has no content" Casper shows that the system checked in, but did not update inventory. When we use the Recon App we are also seeing an error - I have attached a screen shot of the message. We are using Casper 9.61 and our system displaying the fault are a split between Mac OS X 10.9.5 and Mac OS X 10.10.0 Any help would be greatly appreciated.

Hey everybody, I'm attempting to remotely deploy Adobe CC via the JSS. I've followed instructions I was able to find here and using the script it had also linked found here. I checked the jamf.log file, and verified the policy started to run, so I left work yesterday to let it finish as the package is around 19-20GB. This morning, when I checked back in, I noticed it did not install. The log file the script creates showed the following. 2016-11-30 15:09:48: Mounting the DMG Adobe_Install.dmg...2016-11-30 15:09:50: DMG mounted successfully as volume /Volumes/Build on device /dev/disk2.2016-11-30 15:09:50: Installing Package Adobe CC 2016-2017_Install.pkg Adobe CC 2016-2017_Uninstall.pkg from mount path /Volumes/Build...2016-11-30 15:09:50: There was an error installing the package. Exit Code: 1 I tried running the policy again and it returned 2016-12-01 08:46:20: Mounting the DMG Adobe_Install.dmg...2016-12-01 08:46:21: DMG mounted successfully as volume on device .2016-12-01 08:4

If I switch a machine over to wireless (to simulate a laptop),pinging our JSS server by name still works but "jamf recon"and the "Self Service" application both give"Could not connect to the server."Is there some setting that I've missed?